Lock down TS 2008 in sbs 2003 environment

All, (Sorry for the cross post. I think I initially posted this in the wrong
forum)

Yesterday I added a new Windows 2008 R2 Terminal Server to our existing
SBS 2003 R2 environment. My question is this: I want to "lock down" this new
server, so do I create a Group Policy on the SBS box or on the new 2008 TS
box?

Thank you,
Thomas

What do you mean by "lock down"? That's the sort of requirement that can
have many, many meanings. Give us more details on what you're trying to
accomplish and we'll likely be able to help.

--
Charlie.
http://msmvps.com/blogs/russel




"Thomas Kroljic" <> wrote in message
news:%...
> All, (Sorry for the cross post. I think I initially posted this in the
> wrong forum)
>
> Yesterday I added a new Windows 2008 R2 Terminal Server to our existing
> SBS 2003 R2 environment. My question is this: I want to "lock down" this
> new
> server, so do I create a Group Policy on the SBS box or on the new 2008 TS
> box?
>
> Thank you,
> Thomas
>
>

I have a number of users who Remote Desktop in to this terminal server. I
would like to use Group Policy to do a number of things such as:
- remove Control Panel from the Start Menu
- remove Administrative Programs
- Access to Network Cards (nics)
- remove the Run command
- remove the Command prompt...
- remove the Explorer program so they can not view the file (folder)
structure
- basically remove all items from the Start menu that they don't need
access to.

I would like to use Group Policy to control what the users have access
to. I have place these users into a group so I was hoping that I could
create a group policy and then add the group to the GP.

Thank,
Thomas

"Charlie Russel - MVP" <> wrote in message
news41688C8-644F-4E99-8362-...
> What do you mean by "lock down"? That's the sort of requirement that can
> have many, many meanings. Give us more details on what you're trying to
> accomplish and we'll likely be able to help.
>
> --
> Charlie.
> http://msmvps.com/blogs/russel
>
>
>
>
> "Thomas Kroljic" <> wrote in message
> news:%...
>> All, (Sorry for the cross post. I think I initially posted this in the
>> wrong forum)
>>
>> Yesterday I added a new Windows 2008 R2 Terminal Server to our existing
>> SBS 2003 R2 environment. My question is this: I want to "lock down" this
>> new
>> server, so do I create a Group Policy on the SBS box or on the new 2008
>> TS
>> box?
>>
>> Thank you,
>> Thomas
>>
>>
>

I think most of those things are handled by local policies, though it's
probably possible to do it for the domain. But since it's a single TS, I'd
be inclined to just do it there.

--
Charlie.
http://msmvps.com/blogs/russel




"Thomas Kroljic" <> wrote in message
news:...
>I have a number of users who Remote Desktop in to this terminal server. I
>would like to use Group Policy to do a number of things such as:
> - remove Control Panel from the Start Menu
> - remove Administrative Programs
> - Access to Network Cards (nics)
> - remove the Run command
> - remove the Command prompt...
> - remove the Explorer program so they can not view the file (folder)
> structure
> - basically remove all items from the Start menu that they don't need
> access to.
>
> I would like to use Group Policy to control what the users have access
> to. I have place these users into a group so I was hoping that I could
> create a group policy and then add the group to the GP.
>
> Thank,
> Thomas
>
> "Charlie Russel - MVP" <> wrote in message
> news41688C8-644F-4E99-8362-...
>> What do you mean by "lock down"? That's the sort of requirement that can
>> have many, many meanings. Give us more details on what you're trying to
>> accomplish and we'll likely be able to help.
>>
>> --
>> Charlie.
>> http://msmvps.com/blogs/russel
>>
>>
>>
>>
>> "Thomas Kroljic" <> wrote in message
>> news:%...
>>> All, (Sorry for the cross post. I think I initially posted this in the
>>> wrong forum)
>>>
>>> Yesterday I added a new Windows 2008 R2 Terminal Server to our
>>> existing
>>> SBS 2003 R2 environment. My question is this: I want to "lock down" this
>>> new
>>> server, so do I create a Group Policy on the SBS box or on the new 2008
>>> TS
>>> box?
>>>
>>> Thank you,
>>> Thomas
>>>
>>>
>>
>
>

Charlie,
thanks for the advice. I decided to create a Group Policy on the new
server (2008) and then add the users I want the Group Policy to apply to.

Thank you,
thomas

"Charlie Russel - MVP" <> wrote in message
news:70E77E82-D2C8-4EAE-9728-...
>I think most of those things are handled by local policies, though it's
>probably possible to do it for the domain. But since it's a single TS, I'd
>be inclined to just do it there.
>
> --
> Charlie.
> http://msmvps.com/blogs/russel
>
>
>
>
> "Thomas Kroljic" <> wrote in message
> news:...
>>I have a number of users who Remote Desktop in to this terminal server. I
>>would like to use Group Policy to do a number of things such as:
>> - remove Control Panel from the Start Menu
>> - remove Administrative Programs
>> - Access to Network Cards (nics)
>> - remove the Run command
>> - remove the Command prompt...
>> - remove the Explorer program so they can not view the file (folder)
>> structure
>> - basically remove all items from the Start menu that they don't need
>> access to.
>>
>> I would like to use Group Policy to control what the users have access
>> to. I have place these users into a group so I was hoping that I could
>> create a group policy and then add the group to the GP.
>>
>> Thank,
>> Thomas
>>
>> "Charlie Russel - MVP" <> wrote in message
>> news41688C8-644F-4E99-8362-...
>>> What do you mean by "lock down"? That's the sort of requirement that can
>>> have many, many meanings. Give us more details on what you're trying to
>>> accomplish and we'll likely be able to help.
>>>
>>> --
>>> Charlie.
>>> http://msmvps.com/blogs/russel
>>>
>>>
>>>
>>>
>>> "Thomas Kroljic" <> wrote in message
>>> news:%...
>>>> All, (Sorry for the cross post. I think I initially posted this in the
>>>> wrong forum)
>>>>
>>>> Yesterday I added a new Windows 2008 R2 Terminal Server to our
>>>> existing
>>>> SBS 2003 R2 environment. My question is this: I want to "lock down"
>>>> this new
>>>> server, so do I create a Group Policy on the SBS box or on the new 2008
>>>> TS
>>>> box?
>>>>
>>>> Thank you,
>>>> Thomas
>>>>
>>>>
>>>
>>
>>
>